CVE-2026-104735Published
RSS Aggregator by Feedzy <= 5.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Feedzy Loop Block Feed URL / RSS <title>
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-104735 · Microsoft / collected KEV context
cve-program · CVE-2026-104735
- https://www.wordfence.com/threat-intel/vulnerabilities/id/a15a6cf2-aa7d-454c-83d2-9d74ce4505be?source=cve
- https://plugins.trac.wordpress.org/browser/feedzy-rss-feeds/tags/5.2.10/includes/gutenberg/feedzy-rss-feeds-loop-block.php#L207
- https://plugins.trac.wordpress.org/browser/feedzy-rss-feeds/tags/5.2.10/includes/gutenberg/feedzy-rss-feeds-loop-block.php#L262
- https://plugins.trac.wordpress.org/browser/feedzy-rss-feeds/tags/5.2.10/includes/gutenberg/feedzy-rss-feeds-loop-block.php#L241
- https://plugins.trac.wordpress.org/browser/feedzy-rss-feeds/tags/5.2.10/includes/abstract/feedzy-rss-feeds-admin-abstract.php#L1758
- https://downloads.wordpress.org/plugin/feedzy-rss-feeds.5.2.11.zip
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.